feat: K8s 部署清单、Token 接入加固与日志/设置页优化

- kubernetes/: 30Gi PVC、单副本 Recreate、Secret/Service/NodePort/Ingress 清单与部署文档
- 数据安全: kubeconfig/token 统一加密存储，启动迁移历史明文，DB 0600
- Token 接入: 命名空间级最小权限提示、长期 Token、自签证书 TLS 兼容
- 部署: 命名空间级 Token 下跳过 Namespace patch/枚举，节点信息容错
- 日志页: namespace → app → pod 选择顺序与作用域收窄
- 设置页: 拆分为通用/告警/LDAP/镜像源四个 tab
- 弹框: 统一 max-h 滚动与长命令换行，修复内容溢出

backend/services/loki_manifest.go

@@ -9,14 +9,14 @@ import (
 
 func (d *LokiDeployer) generateManifest(ns string) string {
 	version := d.effectiveVersion()
-	image := ResolveImage("docker.io/grafana/loki:" + version)
+	image := ResolveImageFor("loki", "grafana/loki", version)
 	replicas := d.deployment.Replicas
 	if replicas < 1 {
 		replicas = 1
 	}
 	storageSize := d.deployment.StorageSize
 	if storageSize == "" {
-		storageSize = "10Gi"
+		storageSize = "20Gi"
 	}
 
 	cpu := d.deployment.ResourcesCPU
@@ -139,7 +139,7 @@ spec:
         fsGroup: 0
       containers:
       - name: loki
-        image: grafana/loki:%s
+        image: %s
         imagePullPolicy: IfNotPresent
         args:
           - -config.file=/etc/loki/loki.yaml%s%s
@@ -155,8 +155,8 @@ spec:
             cpu: "%s"
             memory: "%s"
           requests:
-            cpu: "200m"
-            memory: "256Mi"
+            cpu: "500m"
+            memory: "512Mi"
         securityContext:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: false